PAGES
← all tools
◆ Data Security & DLP

Zscaler Data Protection

2026-08-13-b5d3c8a8 commercial

Zscaler Data Protection is a cloud-based security service that prevents data loss and enforces policies across web, cloud, and email channels.

Summary

Zscaler Data Protection is a commercial data-security platform, delivered as a cloud service, that inspects and controls sensitive data moving across web, email, cloud, and endpoint channels. It is aimed at SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. analysts and compliance owners who manage DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. incidents rather than at developers writing policy from scratch: when an inline DLP rule triggers, it can engage the end user directly through Slack, Teams, or email, routing their justification to auto-remediation, manager escalation, or analyst review, and it creates enriched tickets in ServiceNow or Jira automatically. It also extends detection into TLS key material and DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. scanning across SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally., cloud, and on-premises storage, and adds context-aware enforcement using Google Cloud resource labels. Launched in 2008, it continues to ship updates, with its last release 44 days ago.

Zscaler Data Protection is a cloud-based security service that prevents data loss and enforces policies across web, cloud, and email channels.

How Zscaler Data Protection helps

Which outbound email or file transfers actually contain sensitive data right now?

inspects web, cloud, and email traffic inline against DLP policy and blocks, alerts, or routes the transfer to a workflow the moment a match fires

Who triggered a DLP incident, and what did they say in their own defense?

engages the user directly through Slack, Teams, or email at the moment of the policy hit, capturing their justification and attaching it to the incident record

Which DLP incidents need an analyst versus which can resolve themselves?

routes each user justification to auto-remediation, manager escalation, or analyst review based on the workflow response, so only the unresolved cases reach a human queue

Has anyone granted a policy exception without going through change control?

creates manager-approved, time-bounded exceptions automatically from workflow responses, leaving no manual policy edit for someone to have snuck through

Are any endpoints or cloud storage locations leaking TLS session keys?

scans endpoint files and DSPM-covered SaaS, cloud, and on-premises storage for SSLKEYLOGFILE content, including obfuscated or renamed variants, and can block real-time outbound transfers of that content

Which Google Cloud workloads are exempt from stricter data controls they should have?

reads Google Cloud resource labels and network tags as policy metadata, so enforcement can be scoped tighter to labeled production workloads than development ones

all 5 features, with the evidence for each →

Features

5 capabilities

Built from Zscaler Data Protection's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What Zscaler Data Protection offers you

  • Ticketing integration1
All capabilities 5 capabilities
Email quarantine release shipped Allows admins to release quarantined emails to all or specific recipients from the incident details view, and optionally lets end users self-release their own quarantined emails after providing a business justification or obtaining manager approval. 2 releases · 2 other sources · first seen Jul 2026

release

  • New Enable Email Quarantine Release for End Users setting in Advanced Account Settings allows end users to release their own quarantined emails after providing a business justification or obtaining manager approval. changelog · Jul 2026 · source · release history
  • Introduces Release Email Quarantine action in the advanced incident details interface, letting admins deliver quarantined messages to all or specific recipients directly from the platform. changelog · Jul 2026 · source · release history

example

  • Manually release a quarantined email to specific recipients from the incident details view when admin review is required. In the Zscaler console, open the incident in the advanced incident details interface, then select the 'Release Email Quarantine' action and choose specific recipients to deliver the message to. changelog · Jul 2026 · source
  • Allow end users to self-release quarantined emails after justification, eliminating helpdesk tickets for routine outbound email DLP hits. In the Zscaler console, go to Advanced Account Settings and enable 'Enable Email Quarantine Release for End Users'. changelog · Jul 2026 · source
End-user justification workflows for DLP incidents shipped Engages users directly via Slack, Teams, or email when a DLP policy triggers, collecting justification responses that route the incident to auto-remediation, manager escalation, or analyst enrichment. 4 releases · first seen Jul 2026

release

  • Integrates identity-provider user-to-manager mapping to enable automated manager escalation routing within DLP incident workflows. changelog · Jul 2026 · source · release history
  • Supports customizable, cloneable, and translatable end-user justification survey templates for global workforce coverage. changelog · Jul 2026 · source · release history
  • Enables manager-approved, time-bounded DLP policy exceptions created automatically through workflow responses — no manual policy edits required. changelog · Jul 2026 · source · release history
  • Adds end-user justification workflows that engage users directly via Slack, Microsoft Teams, or email when an inline DLP policy triggers, routing responses to auto-remediation, manager escalation, or analyst enrichment. changelog · Jul 2026 · source · release history
TLS session secret detection shipped Detects TLS key material (SSLKEYLOGFILE content) across endpoint devices, SaaS platforms, public cloud, and on-premises storage, and enforces inline DLP policies on outbound transfers regardless of file name, type, or obfuscation. 3 releases · first seen Jul 2026

release

  • Extends DSPM scanning to identify files containing TLS session secrets across SaaS platforms, public cloud, and on-premises storage regardless of naming convention or file type. changelog · Jul 2026 · source · release history
  • Adds endpoint DLP detection for SSLKEYLOGFILE content matching legacy and newly standardized formats, including obfuscated or renamed files, to catch TLS key material exfiltration on user devices. changelog · Jul 2026 · source · release history
  • Enables inline DLP engine to detect and policy-enforce outbound SSLKEYLOGFILE transfers in real time via file uploads, web channels, non-web channels, and email — with options to block, alert, or trigger investigation workflows. changelog · Jul 2026 · source · release history
Google Cloud DLP enforcement shipped Inspects and blocks sensitive data in transit across Google Cloud workloads, with policy scoping driven by Google Cloud resource labels and network tags to apply context-aware rules per workload or environment. 2 releases · first seen Aug 2026

release

  • Supports Google Cloud resource labels and network tags as policy metadata, enabling context-aware DLP enforcement scoped to specific workloads (e.g., stricter rules for Production vs. Development environments) tied to your Google Cloud hierarchy. changelog · Aug 2026 · source · release history
  • Adds inline Data Loss Prevention (DLP) to inspect and block sensitive data in transit across Google Cloud workloads. changelog · Aug 2026 · source · release history
ITSM ticketing integration shipped Auto-creates enriched incident tickets in ServiceNow and Jira with user justification responses and forensic context attached. 1 release · first seen Jul 2026

Also counts toward: Ticketing integration

release

  • Supports native integration with ServiceNow and Jira to auto-create enriched incident tickets with user justification and forensic context attached. changelog · Jul 2026 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for Zscaler Data Protection, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Zscaler Data Protection puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Website history

zscaler.com, every change

Zscaler's home page and 40 more pages as they looked each month from August 2021 to October 2026: 172 renders, 68 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Releases

3 entries

  1. August 20261
  2. July 20262

    3 entries

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →